Senior Cyber Security Analyst

Duties/Responsibilities

• Support the development, implementation, and continuous improvement of the organization's cybersecurity program, including policies, standards, and procedures.
• Monitor the organization's security posture, identify risks and vulnerabilities, and recommend practical mitigation strategies.
• Maintain and support incident response processes, including investigations, testing, and post-incident reviews.
• Manage identity and access controls, conduct access reviews, and promote least-privilege security practices.
• Partner with IT, engineering, and business teams to embed security into systems, projects, and operational processes.
• Support vulnerability management, third-party risk assessments, and compliance with security frameworks and audit requirements.
• Assist with security awareness training and promote a strong security culture across the organization.
• Maintain security documentation, asset inventories, and governance records, including risk exceptions and control documentation.
• Track cybersecurity metrics and prepare reports on security risks, initiatives, and overall security posture for technical and business stakeholders.
• Support business continuity and disaster recovery planning to strengthen organizational resilience.

Requirements

• Strong working knowledge of core cybersecurity principles, including access control, risk management, vulnerability management, and incident response.
• Solid understanding of identity and access management, including least-privilege principles and access governance.
• Ability to identify, assess, and clearly articulate cybersecurity risks, with pragmatic recommendation.
• Experience implementing and maintaining practical, risk-based security controls in a business environment.
• Experience supporting or contributing to security policies, standards, and compliance frameworks (e.g., ISO 27001, NIST, CIS or similar).
• Familiarity with security monitoring and incident investigation processes, including coordination with internal teams or third-party providers.
• Understanding of third-party and supplier risk management practices.
• Ability to support security in projects and operational changes, applying secure-by-design principles.
• Strong analytical and problem-solving skills, with the ability to prioritize effectively in a fast-paced environment.
• Excellent communication and presentation skills, with the ability to engage both technical and non-technical stakeholders.
• Ability to work independently while collaborating effectively within established governance and team structures.